Homepage
About Snyk

s3-uploader@1.1.0 vulnerabilities

Resize, rename, and upload images to AWS S3

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the s3-uploader package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Command Injection

s3-uploader is a Flexible and efficient image resize, rename, and upload to Amazon S3 disk storage. Uses the official AWS Node SDK, and im-resize and im-metadata for image processing.

Affected versions of this package are vulnerable to Command Injection which insecurely passes data to the metadata() function. It is then concatenated to an OS command and executed in the context of the server.

How to fix Command Injection?

There is no fixed version for s3-uploader.

*
Go back to all versions of this package